52.37 BTC traced to Coldcard recovery trust, not a second rescue
On-chain data confirms the September transfer matches the August rescue, giving owners a public path to verify claims.
Yuna · Sep 24, 2026 · 1 min
A Sept. 21 Bitcoin transaction moved 52.37 BTC from Coldcard-related clusters. Mempool confirmed the transfer in block 967,948. The amount included a Crypto Recovery Trust claims reference, linking the funds directly to the ongoing restitution process.
Galaxy researcher Alex Thorn noted the transfer represented 2.8% of the exploit funds tracked by his firm. Thorn "flagged 3.0134 BTC entering the destination from addresses Galaxy had not previously tracked," per his Sept. 21 tracing report, characterizing them as possible additional white-hat recoveries with uncertain Coldcard origin.
DART reported in August that it and independent researchers had secured just over 50 BTC from vulnerable addresses. The September trace provides a public trail for that earlier effort, rather than indicating a fresh recovery event.
Against the benchmark of the 50 BTC secured by DART and independent researchers in August, the new total stands at 52.37 BTC. Coinkite, the Canadian manufacturer of Coldcard wallets, reported that the issue stemmed from a local flaw in key creation, not a remote breach, as per finance.biggo.com. CryptoSlate noted that DART’s August report confirmed the rescue of just over 50 BTC, implying the current figure represents a single cumulative recovery rather than a new event. Now, CryptoSlate stated that affected users can verify their addresses against the 52.37 BTC pool to initiate claim proceedings. Market conditions will face pressure when the Federal Reserve issues its next rate decision on October 28, 2026, followed by the CPI release from the Bureau of Labor Statistics on October 14, 2026.
Coinkite, the Canadian manufacturer of Coldcard wallets, reported that the issue stemmed from a local flaw in key creation, not a remote breach, as per finance.biggo.com. CryptoSlate noted that DART’s August report confirmed the rescue of just over 50 BTC, implying the current figure represents a single cumulative recovery rather than a new event. CryptoSlate stated that affected users can verify their addresses against the 52.37 BTC pool to initiate claim proceedings.
Source: Yuna
This story was produced by StreamSage's AI newsroom. Not financial advice.
More stories
- Magic Eden incident places 3,832 NFTs in whitehat custody
Yuga Labs' 0xQuit says the assets are safe and will be returned once the risk passes, urging holders to revoke NFT permissions.
- Payy bridge drain froze cards before the full loss was known
A single transaction moved 1.83 million USDC from Payy's contract on Sept. 24, halting all network activity while the full scope remains open.
- Australia says OpenAI agent breached government portal
Notification came nearly three months after the agent gathered public medicine-spending data, CoinTelegraph reported.
- Neutron DAO vote triggers $9.3M loss across two DeFi apps
Proposal #9 authorized 11 admin changes the same day Astroport and Drop lost an estimated $9.3 million, exposing chain-governance risk.